Describe the bug
Bug: sandbox.enabled: false is not honored — shell backend still initializes BaseContainer and fails with a WRITE_DAC error, making all shell execution impossible on Windows.
Version: 1.0.81-2 (win32-x64), Windows_NT. Config: ~/.copilot/settings.json shows "sandbox":{"enabled":false,...} .
Error on every shell/tool call: backend_unavailable: BaseContainer is unavailable; DACL fallback requires write-DAC permission on 'C:' (ERROR_ACCESS_DENIED, WRITE_DAC not granted) .
Repro: Set sandbox.enabled:false , /restart → shell still fails identically. Persisted ~8h across many restarts. Launching elevated crashes on start. icacls "C:\Program Files\nodejs" /reset advanced the failing path from C:\Program Files\nodejs → C:\ (the DACL fallback walks up the tree; BaseContainer never initializes).
Expected: With sandbox disabled, run commands directly with no container/DACL step. At minimum, fail with a clear, actionable message instead of attempting WRITE_DAC on C:\ .
Affected version
No response
Steps to reproduce the behavior
No response
Expected behavior
No response
Additional context
No response
Describe the bug
Bug: sandbox.enabled: false is not honored — shell backend still initializes BaseContainer and fails with a WRITE_DAC error, making all shell execution impossible on Windows.
Version: 1.0.81-2 (win32-x64), Windows_NT. Config: ~/.copilot/settings.json shows "sandbox":{"enabled":false,...} .
Error on every shell/tool call: backend_unavailable: BaseContainer is unavailable; DACL fallback requires write-DAC permission on 'C:' (ERROR_ACCESS_DENIED, WRITE_DAC not granted) .
Repro: Set sandbox.enabled:false , /restart → shell still fails identically. Persisted ~8h across many restarts. Launching elevated crashes on start. icacls "C:\Program Files\nodejs" /reset advanced the failing path from C:\Program Files\nodejs → C:\ (the DACL fallback walks up the tree; BaseContainer never initializes).
Expected: With sandbox disabled, run commands directly with no container/DACL step. At minimum, fail with a clear, actionable message instead of attempting WRITE_DAC on C:\ .
Affected version
No response
Steps to reproduce the behavior
No response
Expected behavior
No response
Additional context
No response